Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
File: 74RV1AwuPbyyREb8yXoJ7Uut7cM.mft (raw, json)
Hash identifier: VXM5X6AYPdPOPjigodIy0xs3DzNfe4UmIEeFvts9hWI=
Subject key identifier: 90:81:C4:98:A4:38:E0:9F:20:3F:7A:2A:07:CC:E8:01:7A:E3:73:DA
Authority key identifier: EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
Certificate issuer: /CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Certificate serial: 019A71EEAF4EACC8DCC146AABD5D6A9DC644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
Manifest number: 0425
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: 619zNDqmtLKKCjzlIw8zZSm1ZZE.roa (hash: zZAwiAuYtnzM2ojN5bJH5pjkYxQOefSCs6lkaP9dQ7s=)
2: 74RV1AwuPbyyREb8yXoJ7Uut7cM.crl (hash: g6gQZ0LrdKDLQC+AkHt9FJipmNF1hqoC5lY8sAc0tfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:af:4e:ac:c8:dc:c1:46:aa:bd:5d:6a:9d:c6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8455d40c2e3dbcb24446fcc97a09ed4badedc3
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=9081c498a438e09f203f7a2a07cce8017ae373da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:02:7c:15:36:be:89:40:32:7e:5c:1a:33:d0:
56:ca:4f:e5:3a:21:4e:78:09:28:64:a0:2f:b3:0a:
cb:3b:f2:8e:7c:57:61:d0:c9:b6:82:ae:33:9f:8b:
4b:f3:0d:61:fc:51:4f:dc:ed:81:ee:2a:3e:04:62:
0e:40:c2:f9:f6:d6:77:02:25:eb:31:f9:27:9b:c9:
a5:8e:cb:ba:83:5f:21:94:4f:9a:08:fd:f8:11:a0:
9a:17:b6:8f:8e:22:b0:85:cc:98:60:e7:f8:b6:2a:
80:ae:09:5a:cb:39:6b:0c:94:4f:f7:72:f9:d3:2a:
ae:ac:c3:d8:eb:c1:f2:18:67:09:b6:50:88:3f:77:
8f:3b:84:f2:f1:12:99:7b:10:e6:d2:00:a5:7b:89:
e7:90:0f:18:03:67:7e:a6:97:1c:bb:d3:b5:3c:d4:
c2:f4:f9:01:a6:b8:2c:b4:df:27:c3:4b:29:f1:eb:
0e:80:dd:a1:10:82:35:1a:64:52:76:92:74:5e:7e:
58:2e:7d:86:d4:6d:a6:53:ec:53:22:15:c6:2c:e4:
0b:84:6f:88:76:45:cf:a8:d7:c3:f1:08:e1:d0:3a:
93:cb:84:a4:a4:f6:0a:b7:55:48:88:88:af:10:92:
90:95:59:24:95:ab:0d:6b:db:54:bc:13:88:ad:d6:
df:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:81:C4:98:A4:38:E0:9F:20:3F:7A:2A:07:CC:E8:01:7A:E3:73:DA
X509v3 Authority Key Identifier:
keyid:EF:84:55:D4:0C:2E:3D:BC:B2:44:46:FC:C9:7A:09:ED:4B:AD:ED:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74RV1AwuPbyyREb8yXoJ7Uut7cM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0e488f-180d-4c8a-a452-4c74bb59c594/1/74RV1AwuPbyyREb8yXoJ7Uut7cM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:aa:bd:54:54:5b:b1:f6:47:de:be:9e:25:74:15:c8:69:08:
49:8b:ce:66:a0:71:1e:32:5a:95:96:08:f1:78:65:b3:db:d4:
ae:d2:21:a7:92:be:9a:f1:66:b5:90:70:0c:3f:97:47:7e:b2:
1a:2e:ee:10:33:bf:45:fb:16:25:18:d8:cb:14:53:49:4d:7d:
08:f5:e8:73:1d:bb:bc:9d:a2:ae:7a:2b:5f:21:ef:ac:cd:54:
a7:3f:4c:ce:76:b7:71:7c:61:18:1c:7e:ad:6d:af:98:0b:21:
a2:47:39:a3:d8:f6:b0:6d:bb:be:36:bd:0a:c3:1c:b9:b7:ab:
10:0f:dc:2d:85:f8:d0:af:da:76:74:87:3e:0e:e9:87:24:43:
10:1a:9e:de:44:95:c9:1c:05:e2:59:8f:6e:2f:e8:50:27:2b:
00:1f:b4:4c:05:3a:73:f3:81:78:ab:9d:33:c5:4d:f2:97:f3:
79:65:9a:5e:62:05:ba:35:70:a1:a2:fe:c6:17:ea:7b:e8:29:
a7:85:a9:45:48:14:b4:a2:7f:a9:75:db:b9:c3:1a:f2:4f:d8:
c3:1a:b4:06:2d:1a:a4:4c:a6:73:1c:03:24:4d:d2:2a:00:a9:
b3:26:cc:92:b5:28:c1:69:71:e0:6b:22:13:27:68:30:bf:8c:
34:78:ea:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:48 2025 by rpki-client